This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-4ihY9mJb76fTHIa2G34wE_zyMM.roa
File:                     1-4ihY9mJb76fTHIa2G34wE_zyMM.roa (raw, json)
Hash identifier:          lYl6c2G+CdKNDzXWtsH7GHdlIQ2sbDUwmlp70+XgKF8=
Subject key identifier:   FB:88:A1:63:D9:89:6F:BE:9F:4C:72:1A:D8:6D:F8:C0:4F:F3:C8:C3
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0188ABA7AA797587942E053EF3042EDEBC4A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-4ihY9mJb76fTHIa2G34wE_zyMM.roa
Signing time:             Sun 11 Jun 2023 18:11:11 +0000
ROA not before:           Sun 11 Jun 2023 18:11:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:ab:a7:aa:79:75:87:94:2e:05:3e:f3:04:2e:de:bc:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun 11 18:11:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fb88a163d9896fbe9f4c721ad86df8c04ff3c8c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0e:1e:77:6b:a2:ca:75:40:0a:08:20:be:7a:
                    24:f8:c2:fb:5c:32:40:42:89:37:7b:69:83:79:1a:
                    bc:20:72:be:4f:13:0d:50:c1:a3:6b:cf:26:49:16:
                    06:5a:3f:f5:a0:0d:9a:b0:54:d1:6e:09:21:47:d5:
                    56:1e:38:9b:ba:35:75:dc:33:c9:53:1a:2c:5b:cc:
                    13:9b:c6:fe:16:20:93:06:22:ac:b2:97:8c:f8:14:
                    91:68:c6:cb:db:2e:f5:ac:dc:42:36:49:12:9a:05:
                    a6:b0:81:cd:ed:54:d1:3b:8c:bf:aa:1e:7e:d7:b9:
                    f1:7a:85:92:27:30:50:ce:ec:f5:02:de:74:ee:ba:
                    14:02:e8:8f:93:ab:b9:0c:ac:d8:92:04:13:3d:63:
                    1f:ef:a2:38:3a:96:bb:a5:d4:2f:22:7b:25:e0:c7:
                    f5:d9:23:52:bd:aa:ec:31:26:5f:e6:ad:41:48:8b:
                    1f:be:03:01:f3:ef:9b:f2:e5:54:71:4d:b7:67:b1:
                    a5:39:94:a7:ef:29:3f:0b:fa:2f:cd:be:59:96:8f:
                    55:40:1b:40:a0:d6:3f:49:04:19:45:22:25:a4:5a:
                    81:19:df:de:8d:23:4c:2a:29:96:b1:b4:86:77:e4:
                    2a:1d:4c:11:a6:45:8e:8e:a2:4a:91:5f:73:f8:68:
                    eb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:88:A1:63:D9:89:6F:BE:9F:4C:72:1A:D8:6D:F8:C0:4F:F3:C8:C3
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-4ihY9mJb76fTHIa2G34wE_zyMM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:7c:36:42:fa:04:94:dd:c7:18:3b:7d:4d:cd:77:1e:24:c1:
         e9:7c:bf:48:db:ee:f6:22:5d:35:b6:c4:8a:95:29:b0:fb:f9:
         2b:26:e4:a7:b2:53:f7:c1:a1:7b:6e:95:1f:4f:3b:04:b2:e1:
         e9:62:89:71:09:5d:e3:ae:b5:e5:43:f1:44:d3:83:b9:bb:77:
         ec:d5:12:f5:92:23:2d:e2:87:46:3d:69:90:fa:82:a5:38:75:
         64:5e:87:98:29:5e:12:2f:4e:36:d2:0c:75:02:ca:fa:db:6d:
         d1:01:50:54:da:0e:14:79:96:38:61:3d:18:e5:4a:74:16:a9:
         01:17:7f:9f:d4:59:71:a7:09:40:44:fd:52:dd:4c:22:19:7c:
         15:87:02:50:61:39:51:77:8b:5c:7c:81:62:f6:4a:bd:b3:a4:
         8a:34:d3:42:b1:1e:61:13:0c:26:ee:c0:69:40:ba:cc:61:be:
         bc:98:eb:86:ce:6a:f4:46:03:e9:be:54:60:a0:e2:9e:52:1b:
         16:d8:49:ca:85:f1:a5:13:6b:8d:ff:da:d1:47:e4:a1:38:38:
         40:dd:06:5a:7f:c2:8c:f5:81:15:75:3c:d6:69:b3:b0:00:cb:
         3b:59:a2:0f:5e:be:0e:be:93:b4:6d:9b:b5:9b:00:2d:51:3f:
         10:59:bb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 19:35:00 2025 by rpki-client